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DETAILED ACTION 

1 . This action is in response to the communication filed on August 28, 2001 . 
Claims 1-20 were originally received for consideration. No preliminary amendments 
regarding the claims were received. Claims 1-20 are currently being considered. 

Information Disclosure Statement 

2. An initialed and dated copy of the Applicant's IDS form 1449, received on August 
28, 2001 , is attached to this Office action. 

Claim Rejections - 35 USC §112 

The following is a quotation of the first paragraph of 35 U.S.C. 112: 

The specification shall contain a written description of the invention, and of the manner and process of 
making and using it, in such full, clear, concise, and exact terms as to enable any person skilled in the 
art to which it pertains, or with which it is most nearly connected, to make and use the same and shall 
set forth the best mode contemplated by the inventor of carrying out his invention. 

3. Claims 1,3,5,6,9,10,11,15,16,17,18, and 20 are rejected under 35 U.S.C. 112, 
first paragraph, as failing to comply with the enablement requirement. The claim(s) 
contains subject matter which was not described in the specification in such a way as to 
enable one skilled in the art to which it pertains, or with which it is most nearly 
connected, to make and/or use the invention. 

4. Claim 1 discloses the terms "encryptor," "message," and "decryptor." These 
terms are not disclosed in the specification, and it is unclear what the encryptor and 
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decryptor encompass, how the system of the encryption/decryption is set-up, and what 
sort of message is being transmitted. 

5. Claim 1 discloses the relationship "b(f(m)=m." This relationship is not disclosed 
in the specification. 

6. Claim 3 discloses the terms "encryptor," "message," and "decryptor." These 
terms are not disclosed in the specification, and it is unclear what the encryptor and 
decryptor encompass, how the system of the encr-yption/decryption is set-up, and what 
sort of message is being transmitted. 

7. Claim 5 discloses "mapping." There is no mention of any mapping function in the 
specification, and therefore, it is unclear what sort of mapping is being performed. 

8. Claim 5 discloses "transforming X to Y" and "W to U." However, this 
transformation is not disclosed in the specification and therefore, it is not clear what 
transformation functions are being used. 

9. Claim 5 discloses "satisfying x.sub.i>. beta.. sub. Ix.sub.1 +. beta.. sub.2x.sub.2+ . . 
. +.beta..sub.i-1x.sub.i-1+.gamma..sub.1w.sub.1+.gamma..sub.2w.sub.2+ . . . 

+. gamma. .sub. iw.sub.i where, for l.ltoreq.i.ltoreq.n, .gamma.. sub. i=f.sub.i(.beta..sub.i) 
and .beta.. sub. i.di-elect cons.[0, 2.sup.h)." This relationship is not defined in the 
specification, and therefore, it is unclear what beta represents. 

10. Claim 5 discloses the variable "S." There is no definition of "S" in the 
specification, so it is unclear what "S" represents. 



Application/Control Number: 09/939,810 Page 4 

Art Unit: 2131 

1 1 . Claim 6 discloses the terms "encryptor" and "decryptor." These terms are not 
disclosed in the specification, and it is unclear what the encryptor and decryptor 
encompass, and how the system of the encryption/decryption is set-up. 

12. Claim 9 discloses "chaining."' However, no sort of "chaining" is described in the 
specification, and therefore, it is unclear what is function "chaining" actually performs. 

13. Claim 10 discloses "a set of mapping functions." There is no mention of any 
mapping function in the specification, and therefore, it is unclear what sort of mapping is 
being performed. 

14. Claim 1 1 discloses the relationship "bi(f(m)^bj(f(m)." This relationship is not 
disclosed in the specification. 

15. Claim 15 discloses the terms "encryptor," "message," and "decryptor." These 
terms are not disclosed in the specification, and it is unclear what the encryptor and 
decryptor encompass, how the system of the encryption/decryption is set-up, and what 
sort of message is being transmitted. 

16. Claim 16 discloses the terms "encryptor," "message," and "decryptor" These 
terms are not disclosed in the specification, and it is unclear what the encryptor and 
decryptor encompass, how the system of the encryption/decryption is set-up, and what 
sort of message is being transmitted. 

17. Claim 17 discloses "mapping." There is no mention of any mapping function in 
the specification, and therefore, it is unclear what sort of mapping is being performed. 
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18. Claim 17 discloses "transforming X to Y" and "Wto U." However, this 
transformation is not disclosed in the specification and therefore, it is not clear what 
transformation functions are being used. 

19. Claim 17 discloses "satisfying x.sub.i>. beta.. sub. Ix.sub.l+.beta.. sub. 2x.sub.2+ . 
. . +.beta..sub.i-1x.sub.i-1+.gamma..sub.1w.sub.1+.gamma..sub.2w.sub.2+ . . . 

+. gamma.. sub. iw.sub.i where, for l.ltoreq.i.ltoreq.n, .gamma. .sub. i=f.sub.i(. beta. .sub.i) 
and .beta.. sub. i.di-elect cons.[0, 2.sup.h)." This relationship is not defined in the 
specification, and therefore, it is unclear what beta represents. 

20. Claim 17 discloses the variable "S." There is no definition of "S" in the 
specification, so it is unclear what "S" represents. 

21 . Claim 18 discloses the terms "encryptor" and "decryptor." These terms are not 
disclosed in the specification, and it is unclear what the encryptor and decryptor 
encompass, and how the system of the encryption/decryption is set-up. 

22. Claim 19 discloses "additions." However, there is no mention of this operation in 
the specification, and the purpose of the addition is unclear based on the specification. 

23. Claim 20 discloses "a message." It is unclear what sort of message is being 
transmitted based on the specification. 

The following is a quotation of the second paragraph of 35 U.S.C. 112: 

The specification shall conclude with one or more claims particularly pointing out and distinctly 
claiming the subject matter which the applicant regards as his invention. 

24. Claim 19 recites the limitation "said additions" in the third line of the claim. There 
is insufficient antecedent basis for this limitation in the claim. 
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Claim Rejections - 35 USC § 102 

The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351 (a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21(2) 
of such treaty in the English language. 

25. Claims 1-20 are rejected under 35 U.S.C. 102(e) as being anticipated by 
Kurumatani (U.S. Patent No. 6,876,745). 

Regarding claim 1, Kurumatani discloses: 

A cryptographic method, where a non-empty set F of encryption keys F.sub.1, 
F.sub.2, F.sub.3, ... are associated with one single decryption key B satisfying 
b(f(m))=m for any input m and for b being a decryption function employing B and for f 
being an encryption function employing any F.sub.i.di-elect cons.F, comprising: 

obtaining arbitrary and/or random input from which cryptographic keys are 
generated (column 5 lines 53-61); 

generating a decryption key; generating one of a plurality of corresponding 
encryption keys (column 8 lines 39-64); 

supplying an encryptor with said encryption key (column 9 lines 14-17); 
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accepting a message m (column 9 lines 14-17); 

encrypting m by said encryptor to ciphertext c using said encryption key (column 
9 lines 14-17); 

supplying a decryptor with said decryption key (column 9 lines 17-22); and 
decrypting c by said decryptor to recover m using said decryption key (column 9 
lines 17-22). 

Regarding claim 2, Kurumatani discloses; 

A cryptographic method for establishing a secret between two parties comprising: 
generating a secrecy primitive (column 8 line 38 - column 9 line 29); and 
establishing said secret between said two parties using said secrecy primitive 

(column 8 line 38 - column 9 line 29). 

Claim 3 is rejected as applied above in rejecting claim 1. Furthermore, Kurumatani 
discloses: 

A cryptographic method as in claim 1 comprising: 
obtaining arbitrary and/or random input from which cryptographic keys are 
generated; 

generating a decryption key (column 5 lines 53-61); 

generating a corresponding encryption key through a series of transforms where 
at least one of said transforms facilitates the introduction of arbitrary or random noise of 
any desired sufficient amount (column 4 lines 43-67, column 8 lines 39-64); 



Application/Control Number: 09/939,810 Page 8 

Art Unit: 2131 

supplying an encryptor with said encryption key (column 9 lines 14-17); 
accepting a message m (column 9 lines 14-17); 

encrypting m by said encryptor to ciphertext c using said encryption key (column 
9 lines 14-17); 

supplying a decryptor with said decryption key (column 9 lines 17-22); arid 
decrypting c by said decryptor to recover m using said decryption key (column 9 
lines 17-22). 

Claim 4 is rejected as applied above in rejecting claim 1. Furthermore, Kurumatani 
discloses: 

A cryptographic method as in claim 1 comprising: 

obtaining arbitrary and/or random input from which cryptographic keys are 
generated (column 5 lines 53-61); 

generating a decryption key including a set of parameters p in normal positional 
number representation (column 8 lines 39-64); 

generating a corresponding encryption key comprising: 

converting p to self-contained components (column 4 lines 43-67, column 9 lines 

1-22); 

constructing encryption key parameters from said self-contained components by 
inserting zero or more arbitrary/random components in arbitrarily or randomly chosen 
component positions (column 4 lines 43-67, column 9 lines 1-22); and 
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generating all other encryption key parameters (column 4 lines 43-67, column 9 
lines 1-22); 

supplying an encryptor with said encryption key (column 9 lines 14-17); 
accepting a message m (column 9 lines 14-17); 

encrypting m by said encryptor to ciphertext C using said encryption key (column 
9 lines 14-17); 

supplying a decryptor with said decryption key (column 9 lines 17-22); and 
decrypting c by said decryptor to recover m using said decryption key (column 9 
lines 17-22), 

Claim 5 is rejected as applied above, in rejecting claim 1. Furthermore, Kurumatani 
discloses: 

A cryptographic method, as in claim 1, adopting n integer functions f.sub.1, 
f.sub.2, . . . , f.sub.n mapping from [0, 2.sup.h) to [0, 2. sup. h+. delta.), where h>1 and 
2.sup.h+.delta.>1, comprising: 

obtaining arbitrary and/or random input from which cryptographic keys are 
generated (column 5 lines 53-61); 

generating a decryption key, including the generation of a first set of positive 
integers X={x.sub.1, x.sub.2, . . . , x.sub.n} and a second set of positive integers 
W={w.sub.1, w.sub.2, . . . , w.sub.n} satisfying 

x.sub.i>.beta..sub.1x.sub.1+.beta..sub.2x.sub.2+ . . . +.beta..sub.i-1x.sub.i- 

1+. gamma.. sub. Iw.sub. l+.gamma. . sub.2w.sub.2+ . . . +.gamma..sub.iw.sub.i where, 
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for l.ltoreq.i.ltoreq.n, . gamma. .sub.i=f.sub.i(. beta. .sub.i) and .beta..sub.i.di-elect cons.[0, 
2.sup.h) (column 8 lines 39-64); 

transforming X to Y={y.sub.1, y,sub.2, . . . , y.sub.n} and W to U={u. sub.i, 
u.sub.2, . . . , u.sub.n}, including an optional permutation and one or more rounds of 
invertible strong modular multiplication (column 4 lines 43-67); and 

further transforming Y to Z={z. sub. 1, 2.sub.2, . . . , z.sub.n} and U to V={v.sub.1, 
v.sub.2, . . . , v.sub.n} satisfying the following: 

a. p.sub.O, p. sub.i, . .q. , p,sub.t-1 are pairwise co-prime (column 4 lines 43-67) 

b. z.sub.i=(z.sub.i, 0, z.sub.i, 1, . . . , z.sub.i, qt-1)for l.ltoreq.i.ltoreq.n and 
q.gtoreq.1 (column 4 lines 43-67) 

c. J={j. sub. 0, j. sub.i, . . . , j, sub. k-1} is a set of arbitrary or random indices where 
O.ltoreq.j.sub.O, j.sub.2, . . . , j.sub.k-1<t (column 4 lines 43-67) 

d. S={s.sub.O, s.sub.1, . . . , s.sub.k-1} is an arbitrary or random set satisfying: 
O.ltoreq.s.sub.O, s.sub.1, . . . , s.sub.k-1 <qt, and S % t={s.sub.O%t, s.sub.1 %t, . . . , 
s.sub.k-1%t}=J (column 4 lines 43-67) 

e. .Pl.p.sub.j.di-elect cons. J>. beta. .sub.1y.sub.1+. beta. . sub.2y.sub.2+ . . . 
+. beta.. sub. ny.sub.n+. gamma.. sub. 1u. sub. 1+.gamma..sub.2u. sub. 2+ . . . 
+.gamma..sub.nu.sub.n (column 4 lines 43-67) 

f. z.sub.i, s.di-elect cons.S=y.sub.i% p.sub.s%t (column 4 lines 43-67) 

g. z.sub.i, s.di-elect cons.SS are arbitrary or random numbers modulo p.sub.s%t 
for O.ltoreq.s<qt (column 4 lines 43-67) 
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h. v.sub.i=(v.sub.i, 0, v.sub.i, 1, . . . , v.sub.i, qt-1) for lltoreq.i.ltoreq.n (column 4 
lines 43-67) 

i. v.sub.i, s.di-elect cons.S=w.sub.i % p.sub.s%t (column 4 lines 43-67) 

j. v.sub.i, sS are arbitrary or random numbers modulo p.sub.s%t for O.ltoreq.s<qt. 
(column 4 lines 43-67) 

Claim 6 is rejected as applied above in rejecting claim 5. Furthermore, Kurumatani 
discloses: 

A cryptographic method as in claim 5 further comprising: 

supplying an encryptor with said encryption key (column 9 lines 14-17); 

encrypting by said encryptor one or more nh-bit data blocks which are divided 

into h-bit sub-blocks d.sub.1 , d.sub.2, . . . , where each block is encrypted to c=(c.sub.O, 

c.sub.1, . . . , c.sub.qt-1) with c.sub.s=(d.sub.1z.sub.1, s+d.sub.2z.sub.2, s+ . . . 

+d.sub.nz.sub.n, x+f.sub.1 (d.sub.1 )v.sub.1, s+f.sub.2(d.sub.2)v.sub.2, s+ . . . 

+f.sub.n(d.sub.n)v.sub.n, s) % p.sub.s%t for O.ltoreq.s<qt (column 9 lines 14-17); 
supplying a decryptor with said decryption key (column 9 lines 17-22); and 
decrypting by said decryptor each of said encrypted blocks C to recover said 

data blocks, by extracting C={c.sub.s.vertline.s.di-elect cons.S} from c and by repeating, 

for each d.sub.i for lltoreq.i.ltoreq.n, the following: 

a. converting C to a form where d.sub.i can be determined (column 9 lines 17-22) 

b. obtaining d.sub.i from said converted C (column 9 lines 17-22) 
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c. removing from said converted C the quantity that d.sub.i introduced (column 9 
lines 17-22). 

Claim 7 is rejected as applied above in rejecting claim 6. Furthermore, Kurumatani 
discloses: 

A cryptographic method as in claim 6, where said encryption is carried out, in 
lieu, independently on self-contained components, comprising: 

calculating c by carrying out two or more of said additions (+) and/or by 
computing two or more of said terms d.sub.iz.sub.ij and f.sub.i(d.sub.i)v.sub.i, j in 
parallel (column 9 lines 14-17). 

Claim 8 is rejected as applied above in rejecting claim 1 . Furthermore, Kurumatani 
discloses: 

A cryptographic method, as in claim 1, for communicating a message securely 
from a first party E to a second party D comprising: 

obtaining at party D arbitrary and/or random input from which cryptographic keys 
are generated (column 5 lines 53-61); 

generating at party D a decryption key to be kept secret (column 8 lines 39-64); 

generating at party D one of a plurality of corresponding encryption keys (column 
9 lines 1-22); 

distributing said encryption key from party D to party E (column 9 lines 14-17); 
accepting a message m at party E (column 9 lines 14-17); 
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encrypting m to ciphertext at party E, employing said encryption key (column 9 
lines 14-17); 

transmitting said ciphertext from party E to party D (column 9 lines 14-22); 
receiving said ciphertext at party D (column 9 lines 14-22); and 
decrypting said ciphertext at party D to recover m, employing said decryption key 
(column 9 lines 17-22). 

Claim 9 is rejected as applied above in rejecting claim 8. Furthermore, Kurumatani 
discloses: 

A cryptographic method as in claim 8 further comprising: 
applying chaining in the encryption of m to c with zero or more blocks of arbitrary 
or random bits pre-pended to m (column 9 lines 14-17). 

Claim 10 is rejected as applied above in rejecting claim 5. Furthermore, Kurumatani 
discloses: 

A cryptographic method, as in claim 5, using dynamic mapping for 
communicating a message securely from a first party E to a second party D which 
generates said encryption key to be kept secret and said decryption key to be sent to 
party E, further comprising: 

agreeing upon a set of mapping functions f.sub.1, f.sub.2, . . . , f.sub.n for said 
current communication by said two parties, where said set of mapping functions only 
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observe their domain and range restrictions and are independent of and unrelated to 
any other encryption or decryption parameters (column 4 lines 43-67); 

distributing said encryption key from party D to party E (column 9 lines 14-17); 

accepting a message m at party E (column 9 lines 14-17); 

encrypting m to ciphertext at party E, employing said encryption key and f.sub.1, 
f.sub.2, . . . , f.sub.n; transmitting said ciphertext from party E to party D over a 
communication channel (column 9 lines 14-17); 

receiving said ciphertext at party D (column 9 lines 14-22); and 

decrypting said ciphertext at party D to recover m, employing said decryption key 
and f.sub.1, f.sub.2, . . . , f.sub.n (column 9 lines 17-22). 

Claim 1 1 is rejected as applied above in rejecting claim 2. Furthermore, Kurumatani 
discloses: 

A cryptographic method, as in claim 2, where one encryption key F.sub.x is 
associated with a non-empty set B.sub.x of decryption keys B.sub.x, 1, B.sub.x, 2, . . . , 
B.sub.x, n satisfying b.sub.i(f(m)).noteq.b.sub.j(f(m)) for one or more input m if i.noteq.j, 
with b.sub.i and b.sub.j being decryption functions employing B.sub.x, i and B.sub.x, j 
respectively and f being an encryption function employing F.sub.x, comprising: 

obtaining at a first party D arbitrary and/or random input from which cryptographic 
keys are generated (column 5 lines 53-61); 

generating at party D secret decryption keys B.sup.1, B.sup.2, , . . , B.sup.k 
where B.sup.x.di-elect cons. B.sub.x for l.ltoreq.y.ltoreq.k (column 9 lines 39-64); 
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generating at party D encryption keys F.sub.1, F.sub.2, . . . , F.sub.k as said 
secrecy primitive, where F.sub.x corresponds to B.sub.x for 1 .Itoreq.x.ltoreq.k (column 9 
lines 1-22); 

distributing said encryption keys from party D to a second party E (column 9 lines 
14-17); and 

establishing said secret between said two parties by making use of said 
encryption keys and decryption keys (column 9 lines 14-22). 

Claim 12 is rejected as applied above in rejecting claim 11. Furthermore, Kurumatani 
discloses: 

A cryptographic method, as in claim 1 1, for establishing said secret comprising: 
generating at party D said encryption keys and decryption keys (column 9 lines 
14-22); 

distributing said encryption keys from party D to party E (column 9 lines 14-17); 

receiving said encryption keys at party E (column 9 lines 14-17); 

encrypting arbitrary or random data blocks at party E employing said encryption 
keys (column 9 lines 14-17); 

transmitting said encrypted data blocks from party E to party D over a 
communication channel (column 9 lines 14-22); 

receiving at party D said encrypted data blocks from party E (column 9 lines 14- 

22); 
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decrypting said encrypted data blocks employing said decryption keys at party D 
to obtain information/characteristics about said data blocks (column 9 lines 17-22); and 

communicating to party E by party D, based on said information/characteristics 
gained about said data blocks, instructions to transform a special entity to a form from 
which party E learns said secret party D intends to convey and establish (column 9 lines 
14-22). 

Claim 13 is rejected as applied above in rejecting claim 12. Furthermore, Kurumatani 
discloses: 

A cryptographic method as in claim 12 further comprising: 
using said established secret for further secure communications and 
cryptographic applications between said two parties (column 9 lines 14-22). 

Claim 14 is rejected as applied above in rejecting claim 1. Furthermore, Kurumatani 
discloses: 

A cryptographic method as in claim 1 for the zero-knowledge 
authentication/identification of a party possessing said secret decryption key 
comprising: 

proving said authenticity/identity by said party through the exhibition of the ability 
to decrypt any valid encrypted messages using said decryption key (column 9 lines 17- 
22). 
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Regarding claim 15, Kurumatani discloses: 

A cryptographic system, where a non-empty set F of complete encryption keys 
F.sub.1, F.sub.2, F.sub.3, ... are associated with one single decryption key B satisfying 
b(f(m))=m for any input m and for b being a decryption mechanism employing B and for 
f being an encryption mechanism employing any F.sub.i.di-elect cons.F, comprising: 

means for obtaining arbitrary and/or random input from which cryptographic keys 
are generated (column 5 lines 53-61 ); 

means for generating a decryption key (column 8 lines 39-64); 

means for generating one of a plurality of corresponding encryption keys (column 
9 lines 1-22); 

means for supplying an encryptor with said encryption key; means for accepting 
a message m (column 9 lines 14-17); 

means for encrypting m by said encryptor to ciphertext C using said encryption 
key (column 9 lines 14-17); 

means for supplying a decryptor with said decryption key (column 9 lines 17-22); 

and 

means for decrypting c by said decryptor to recover m using said decryption key 
(column 9 lines 17-22). 

Claim 16 is rejected as applied above in rejecting claim 15. Furthermore, Kurumatani 
discloses: 
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A cryptographic system as in claim 15 comprising: 

means for obtaining arbitrary and/or random input from which cryptographic keys 
are generated (column 5 lines 53-61 ); 

means for generating a decryption key including a set of parameters p in normal 
positional number representation (column 8 lines 39-64); 

means for generating a corresponding encryption key comprising: 

means for converting p to self-contained components (column 4 lines 43-67, 
column 9 lines 1-22); 

means for constructing encryption key parameters from said self-contained 
components by inserting zero or more arbitrary/random components in arbitrarily or 
randomly chosen component positions (column 4 lines 43-67, column 9 lines 1-22); and 

means for generating all other encryption key parameters (column 4 lines 43-67, 
column 9 lines 1-22); 

means for supplying an encryptor with said encryption key (column 9 lines 14- 

17); ' 

means for accepting a message m (column 9 lines 14-17); 
means for encrypting m by said encryptor to ciphertext c using said encryption 
key (column 9 lines 14-17); 

means for supplying a decryptor with said decryption key (column 9 lines 17-22); 

and 

means for decrypting c by said decryptor to recover m using said decryption key 
(column 9 lines 17-22). 
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Claim 17 is rejected as applied above in rejecting claim 15. Furthermore, Kurumatani 
discloses: 

A cryptographic system, as in claim 15, with means for implementing n integer 
functions f.sub.1, f.sub.2, . . . , f.sub.n mapping from [0, 2.sup.h) to [0, 2.sup.h+.delta.), 
where h>1 and 2.sup.h+.delta.>1, comprising: 

means for obtaining arbitrary and/or random input from which cryptographic keys 
are generated (column 5 lines 53-61); 

means for generating a decryption key, including the generation of a first set of 
positive integers X={x.sub.1 , x.sub.2, . . . , x.sub.n} and a second set of positive integers 
W={w.sub.1, w.sub.2, . . . , w. sub. n} satisfying x.sub.i>.beta..sub.1x- 
.sub.1+-beta..sub.2x.sub.2+ . . . +.beta..sub,i-1x.sub.i-1+. gamma.. sub.lw.- 
sub.1+.gamma..sub.2w.sub.2+ . . . +.gamma..sub.iw.sub.i where, for l.ltoreq.i.ltoreq.n, 
. gamma.. sub. i=f.sub.i(. beta. .sub.i) and .beta..sub.i.di-elect cons.[0, 2.sup.h) (column 9 
lines 17-22); 

means for transforming X to Y={y.sub.1 , y.sub.2, . . . , y.sub.n} and W to 
U={u. sub.i, u,sub.2, . . . , u.sub.n}, including an optional permutation and one or more 
rounds of invertible strong modular multiplication (column 4 lines 43-67); 

means for further transforming Y to Z={z.sub,1 , z.sub.2, . . . , z.sub.n} and U to 
V={v.sub.1, v.sub.2, . . . , v.sub.n} satisfying the following: 

a. p.sub.O, p.sub.1, . . . , p.sub.t-1 are pairwise co-prime (column 4 lines 43-67) 
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b. z.sub.i=(2.sub.i, 0, z.sub.i, 1, . . . , z.sub.i, qt-1)for l.ltoreq.i.ltoreq.n and 
q.gtoreq.1 (column 4 lines 43-67) 

c. J={j.sub.O, j.sub.1, . . . , j.sub.k-1} is a set of arbitrary or random indices where 
O.ltoreq.j.sub.O, j.sub.2, . . . , j.sub.k-1<t (column 4 lines 43-67) 

d. S={s.sub.O, s.sub.1, . . . , s.sub.k-1} is an arbitrary or random set satisfying: 
O.ltoreq.s.sub.O, s.sub.1, . . . , s.sub.k-1 <qt, and S % t={s.sub.O%t, s.sub.1 %t, . . . 

, s.sub.k-1 %t}=J (column 4 lines 43-67) 

e. .Pl.p.sub.j.di-elect cons. J>. beta. .sub.1y.sub.1+.beta..sub.2y.sub.2+ . . . 
+.beta..sub.ny.sub.n+. gamma. .sub.lu. sub. 1+.gamma.. sub. 2u.sub.2+ . . . 
+.gamma..sub.nu.sub.n (column 4 lines 43-67) 

f. z.sub.i, s.di-elect cons.S=y.sub.i % p.sub.s%t (column 4 lines 43-67) 

g. z.sub.i, sS are arbitrary or random numbers modulo p.sub.s%t for O.ltoreq.s<qt 
(column 4 lines 43-67) 

h. v.sub.i=(v.sub.i, 0, v.sub.i, 1, . . . , v.sub.i, qt-1)for l.ltoreq.i.ltoreq.n (column 4 
lines 43-67) 

i. v.sub.i, s.di-elect cons.S=w.sub.i % p.sub.s%t (column 4 lines 43-67) 

j. v.sub.i, sS are arbitrary or random numbers modulo p.sub.s%t for O.ltoreq.s<qt. 
(column 4 lines 43-67). 

Claim 18 is rejected as applied above in rejecting claim 17. Furthermore, Kurumatani 
discloses; 

A cryptographic system as in claim 17 further comprising: 
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means for supplying an encryptor with said encryption key (column 9 lines 14- 

17); 

means for encrypting by said encryptor one or more nh-bit data blocks which are 
divided into h-bit sub-blocks d.sub.1, d.sub,2, . . . , d.sub.n, where each block is 
encrypted to c=(c.sub.O, c.sub.1, . . . , c.sub.qt-1) with c.sub.s=(d.sub.1z.sub.1, 
s+d.sub.2z.sub.2, s+ . . . +d.sub.nz.sub.n, s+f,sub.1 (d.sub.1 )v.sub.1, 
s+f.sub.2(d.sub.2)v.sub.2, s+ . . . +f.sub.n(d.sub.n)v.sub.n, s) % p.sub.s%tfor 
O.ltoreq.s<qt (column 9 lines 14-17); 

means for supplying a decryptor with said decryption key (column 9 lines 17-22); 

and 

means for decrypting by said decryptor each of said encrypted blocks c to 
recover said data blocks, by extracting C={c.sub.s,vertline.s.di-elect cons.S} from c and 
by repeating, for each d.sub.i for l.ltoreq.i.ltoreq.n, the following: 

a. converting C to a form where d.sub.i can be determined (column 9 lines 17-22) 

b. obtaining d.sub.i from said converted C (column 9 lines 17-22) 

c. removing from said converted C the quantity that d.sub.i introduced (column 9 
lines 17-22). 

Claim 19 is rejected as applied above in rejecting claim 18. Furthermore, Kurumatani 
discloses: 

A cryptographic system as in claim 18, where said encryption is carried out, in 
lieu, independently on self-contained components, comprising: 
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means for calculating c by carrying out two or more of said additions (+) and/or 
by computing two or more of said terms d.subJz.sub.ij and f.sub.i(d.sub.i)v.sub.ij in 
parallel (column 9 lines 14-17). 

Claim 20 is rejected as applied above in rejecting claim 15. Furthermore, Kurumatani 
discloses: 

A cryptographic system, as in claim 15, for communicating a message securely 
from a first party E to a second party D comprising: 

means for obtaining at party D arbitrary and/or random input from which 
cryptographic keys are generated (column 5 lines 53-61); 

means for generating at party D a decryption key to be kept secret (column 8 
lines 39-64); 

means for generating at party D one of a plurality of corresponding encryption 
keys (column 9 lines 1-22); 

means for distributing said encryption key from party D to party E (column 9 lines 
14-17); 

means for accepting a message m at party E (column 9 lines 14-17); 
means for encrypting m to ciphertext at party E, employing encryption key 
(column 9 lines 14-17); 

means for transmitting said ciphertext from party E to party D (column 9 lines 14- 

22); 

means for receiving said ciphertext at party D (column 9 lines 14-22); and 
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means for decrypting said ciphertext at party D to recover m, employing said 
decryption key (column 9 lines 17-22). 
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